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DIALOG (R) File 2 : INSPEC 
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6894016 INSPEC Abstract Number: C2001-05-4 270-012 
Title: The quantum complexity of set membership 

Author(s): Radhakrishnan, J.; Sen, P.; Venkatesh, S. 

Author Affiliation: Sch. of Technol . & Comput . Sci., Tata Inst, of 
Fundamental Res., Mumbai, India 

Conference Title: Proceedings 41st Annual Symposium on Foundations of 
Computer Science p. 554-62 

Publisher: IEEE Comput. Soc, Los Alamitos, CA, USA 

Publication Date: 2000 Country of Publication: USA xiv+687 pp. 
ISBN: 0 7695 0850 2 Material Identity Number: XX-2000-028 12 

U.S. Copyright Clearance Center Code: 0 7695 0850 2/2000/$10 . 00 
Conference Title: Proceedings 41st Annual Symposium on Foundations of 
Computer Science 

Conference Sponsor: IEEE Comput. Soc. Tech. Committee on Math. Found. 
Comput 

Conference Date: 12-14 Nov. 2000 Conference Location: Redondo Beach, 
CA, USA 

Language: English Document Type: Conference Paper (PA) 
Treatment: Theoretical (T) 

Abstract: Studies the quantum complexity of the static set membership 
problem: given a subset S ( S <or=n) of a universe of size m(»n), store it 
as a table, T: (0,1) /sup r/ to (0,1), of bits so that queries of the form 
'is x in S?' can be answered. The goal is to use a small table and yet 
answer queries using a few bit probes. This problem was considered by H. 
Buhrman et al . (2000), who showed lower and upper bounds for this problem 
in the classical deterministic and randomised models. In this paper, we 
formulate this problem in the "quantum bit-probe model". We assume that 
"access to the table T is provided by means of a black-box (oracle) 
unitary transform O/sub T/ that takes the basis state (y,b) to the basis 
state y,b(+)T(y)>. The query algorithm is allowed to apply O/sub T/ on 
any superposition of basis states. We show tradeoff results between the 
space (defined as 2/sup r/) and the number of probes (oracle calls) in this 
model. Our results show that the lower bounds shown by Buhrman et al. for 
the classical model also hold (with minor differences) in the quantum 
bit-probe model. These bounds almost match the classical upper bounds. 
Our lower bounds are proved using linear algebraic arguments. (16 Refs) 

Subfile: C 

Descriptors: computational complexity; linear algebra; probes; quantum 
computing; query processing; set theory 

Identifiers: quantum complexity; static set membership problem; bit table 
; query answering; lower bounds; upper bounds; quantum bit-probe model; 
black-box unitary transform; oracle calls; query algorithm; basis state 
superposition; space-probe tradeoff; linear algebra 

Class Codes: C4270 (Quantum computing theory); C4240C (Computational 
complexity); C1160 (Combinatorial mathematics); C1110 (Algebra) 
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6763131 INSPEC Abstract Number: B2000-12-6120D-047 , C2000-12-6130S-072 
Title: Privacy enhanced access control by SPKI 

Author (s): Saito, T.; Umesawa, K.; Okuno, H.G. 
Author Affiliation: Dept. of Inf. Sci., Tokyo Univ., Japan 
Conference Title: Proceedings Seventh International Conference on 
Parallel and Distributed Systems: Workshops p. 301-6 
Editor(s): Shibata, Y. 

Publisher: IEEE Comput. Soc, Los Alamitos, CA, USA 

Publication Date: 2000 Country of Publication: USA xiii+563 pp. 
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ISBN: 0 7695 0571 6 Material Identity Number: XX-2000-02396 

U.S. Copyright Clearance Center Code: 0 7695 0571 6/2000/$ 10 . 00 
Conference Title: Proceedings Seventh International Conference on 

Parallel and Distributed Systems: Workshops 

Conference Sponsor: Iwate Prefectural Univ., Japan; IEEE Comput . Soc. 

Tech. Committee on Distributed Process 

Conference Date: 4-7 July 2000 Conference Location: Iwate, Japan 
Language: English Document Type: Conference Paper (PA) 
Treatment: Theoretical (T) 

Abstract: In Internet and electronic commerce applications, a user may 
want to access servers as anonymous with an authorized certificate. In this 
paper, such privacy-enhanced service scheme is presented by using Simple 
Public Key Infrastructure (SPKI). A certificate of SPKI carries as few 
information on clients as possible compared to a certificate of PKIX 
(Public Key Infrastructure with X.509). After obtaining a certificate 
issued by an authorized server, a client submits the certificate to the 
service provider (server) in order to take services associated with the 
certificate. Then, the provider verifies the submitted certificate and 
gives permission to the client if verified. A client can delegate a 
certificate to a third party, so that he/she can access the server instead 
of the original certificate recipient. The implementation of the proposed 
certificate-based access control consists of authorized server , issuing 
agent, client. These are based on SPKI certificate issuer, certificate 
verifier, access control list management, and delegate mechanism. These 
subsystems are coded on the basis of SPKI library written in Java. (11 
Refs) 
Subfile: B C 

Descriptors: access protocols; cryptography; electronic commerce 

Identifiers: electronic commerce; Internet; privacy-enhanced service; 
Simple* Public Key Infrastructure; service provider; client; server; 
authorized server; certificate-based access 

Class Codes: B6120D ' (Cryptography) ; C6130S (Data security); C5640 ( 
Protocols); C1260C (Cryptography theory) 

Copyright 2000, IEE 
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6411529 INSPEC Abstract Number: C2000-01-6150N-003 

Title: Managing Windows NT (R) file system permissions -a security tool to 
master the complexity of Microsoft Windows NT (R) file system permissions 
Author(s): Hanner, K. ; Hormanseder, R. 

Author Affiliation: Inst. for Inf. Process. & . Microprocess . Technol . , 
Johannes Kepler Univ., Linz, Austria 

Journal: Journal of Network and Computer Applications vol.22, no. 2 
p. 119-31 

Publisher: Academic Press, 

Publication Date: April 1999 Country of Publication: UK 

CODEN: JNCAF3 ISSN: 1084-8045 

SICI: 1084-8045 (199904) 22: 2L. 119: MWFS; 1-9 

Material Identity Number: Fl 16-1999-004 

U.S. Copyright Clearance Center Code: 1084-8045/99/040119+13$30 . 00/0 
Language: English Document Type: Journal Paper (JP) 
Treatment: Practical (P) 

Abstract: One of the main tasks of an operating system is to share global 
resources among multiple users. Additionally, modern operating systems are 
able to control access to these resources in order to protect them against 
unauthorised user access. Windows NT makes use of access control lists 
(ACLs) to implement this feature. An ACL is a list of users and their 
permissions to access a specific object. It can be associated with any 
globally accessible object such as files, folders, registry keys, 
processes, pipe endpoints and many others. However, the standard tools of 
Windows NT have limited functionality for managing these object 
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permissions . For example, Windows NT only supports an object-centred view 
of these permissions . That means you can view and manipulate the 

permissions per object, but not per user. The subject of the paper is the 
realization of a user-centred visualization of object permissions . An 
application has been developed in the course of this project. It deploys 
several strategies for producing concise and clear representations of the 

permissions of a single user. An archive function maintains a history and 
you can therefore compare security settings from different times. (9 

Refs) 
Subfile: C 

Descriptors: authorisation; file organisation; network operating systems 
Identifiers: Windows NT; file system permissions ; security tool; global 
resources; unauthorised user access; access control lists ; registry 
keys; object permissions ; user-centred visualization; archive function; 
security settings 

Class Codes: C6150N (Distributed systems software); C5620 (Computer 
networks and techniques); C6120 (File organisation); C6130S (Data security 
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"^6175031 INSPEC Abstract Number: C1999-04-6130S-005 

Title: File system security: secure network data sharing for NT and UNIX 

Author'! s ) : Allison, B.; Hawley, R . ; Borr, A.; Muhlestein, M . ; Hitz, D. 
Conference Title: Proceedings of the Large Installation System 
Administration of Windows NT .. Conference p. 17-26 
Publisher: USENIX Assoc*' Berkley, CA, USA 

Publication Date: 1998 Country of Publication: USA 88 pp. 
ISBN: 1 880446 96 0 Material Identity Number: XX-1998-02274 

Conference Title: Proceedings of LISA NT: 2nd USENIX Large Installation 
Systems Administration of Windows NT 
Conference Sponsor: USENIX Assoc 

Conference Date: 5-8 Aug. 1998 Conference Location: Seattle, WA, USA 
Language: English Document Type: Conference Paper (PA) 
Treatment: Practical (P) 

Abstract: Sharing network data between UNIX and NT systems is becoming 
increasingly important as NT moves into areas previously serviced entirely 
by UNIX. One difficulty in sharing data between UNIX and NT is that their 
file system security models are quite different.. NT file servers use 

access control lists (ACLs) that allow permissions to be specified 
for an arbitrary number of users and groups, while UNIX NFS servers use 
traditional UNIX permissions that provide control only for owner, group, 
and other. This paper describes a merged model in which a single file 
system can contain both files with NT-style ACLs and files with UNIX-style 

permissions . For native file service requests (NFS requests to UNIX-style 
files and NT requests to NT-style files) the security model exactly 

matches a UNIX or NT file server. For non-native requests, heuristics 

allow a reasonable level of access without compromising the security 
guarantees of the native model. (5 Refs) 
Subfile: C 

Descriptors: authorisation; file servers; network operating systems; Unix 

Identifiers: file system security models; secure network data sharing; NT 
; UNIX; access control lists ; file servers; permission ; UNIX NFS 
servers; native file service requests; non-native requests; heuristics; 
security guarantees 

Class Codes: C6130S (Data security); C6150J (Operating systems); C6150N ( 
Distributed systems software) ; C5620 {Computer networks and techniques) 
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6168036 INSPEC Abstract Number: C1999-03-6130S-054 
Title: Merging NT and UNIX filesystem permissions 

Author (s): Hitz, D.; Allison, B.; Borr, A.; Hawley, R. ; . Muhlestein, M. 

Conference Title: Proceedings of the 2nd USENIX Windows NT Symposium 
p. 87-95 

Publisher: USENIX Assoc, Berkeley, CA, USA 

Publication Date: 1998 Country of Publication: USA 173 pp. 
ISBN: 1 880446 95 2 Material Identity Number: XX-1998-02272 

Conference Title: Proceedings of 2nd USENIX Windows NT Symposium 
Conference Date: 3-5 Aug. 1998 Conference Location: Seattle, WA, USA 
Language: English Document Type: Conference Paper (PA) 
Treatment: Practical (P) 

Abstract: Sharing network data between NT and UNIX systems' is becoming 
increasingly important as NT moves into areas previously serviced entirely 
by UNIX. One difficulty in sharing data is that the two filesystem security 
models are quite different. NT file servers use access control, lists 
(ACLs) that allow permissions to be specified for an arbitrary number 
of users and groups, while UNIX NFS servers use traditional UNIX 
permissions that provide control only for owner, group, and other. The 
paper describes an integrated security model in which a 'single filesystem 
can contain both files with NT-style ACLs and . files with UNIX-style 
permissions . For native file service requests, _ (NT requests to NT-style 
files and NFS requests to UNIX-style files) ^jjjtie security model exactly 
matches an NT or UNIX file server. For non-native requests," heuristics 
allow a reasonable level of access without compromising the security 
guarantees of the native model. (6 Refs) 

Subfile: C -V 
Descriptors: authorisation; file organisation; file' servers; operating 
systems (computers); Unix 

Identifiers: UNIX filesystem permissions ; network data sharing; UNIX 
systems; data sharing; filesystem security models; NT file servers; access 

control lists ; UNIX NFS servers; traditional UNIX permissions ; 
integrated security model; NT-style ACLs; UNIX-style permissions ; native 
file service requests; security model; *UNIX file server; non-native 
requests; heuristics; security guarantees 

Class Codes: C6130S (Data security) v ; * C6150J (Operating systems); C0310D ( 
Computer installation management); C6120 (File organisation); C5690 ( 
Other data communication equipment and techniques) 
Copyright 1999, IEE 
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6095953 INSPEC Abstract lumber: C9901-6130S-029 
Title: Meta objects for a^cqess control: role-based principals 

Author(s): Riechmann, T . ;* r Kleinoder , J. 

Author Affiliation: Dept. of Comput . Sci. IV, Erlangen-Nurnberg Univ., 
Germany 

Conference Title: Information Security and Privacy. Third Australasian 
Conference, ACISP'98. Proceedings p. 296-307 
Editor (s): Boyd, C; Dawsons, E. 
Publisher: Springer-Verlag, Berlin, Germany 

Publication Date: 1998 Country of Publication: Germany xi+422 pp. 

ISBN: 3 540 64732 5 Material Identity Number: XX98-01842 

Conference Titr^: Information Security and Privacy. Third Australasian 
Conference, ACIS ; P<7 f 98 Proceedings 

Conference Date: 13-15 July 1998 Conference Location: Brisbane, Qld., 
Australia 

Language: English Document Type: Conference Paper (PA) 
Treatment: Practical (P) 
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Abstract: Most current object-based distributed systems support access 
control lists for access control. However, it is difficult to 
determine which principal information to use for authentication of method 
calls. Domain-based and thread-based principals suffer from the problem of 
privileges being leaked. Malicious objects can trick privileged objects or 
threads to accidentally use their privileges (UNIX 8 bit problem) . The 
authors introduce role-based principals to solve this problem. Each object 
reference may be associated with a role, which determines trust, 
authentication and permissible data flow via the reference. An object may 
act in different roles when interacting with different other parties. 
Exchanged references automatically inherit the role. By initially defining 
such roles, one can establish a security policy on a very high abstraction 
level. The security model is based on meta objects: principal meta objects 
provide principal information for method invocation, access control meta 
objects implement access checks. (16 Refs) 

Subfile: C 

Descriptors: authorisation; distributed object management; distributed 
programming; object-oriented programming 

Identifiers: object-based distributed systems; access control' lists ; 
meta objects; role-based principals; method call authentication; 
domain-based principals; thread-based principals; privilege leaking; 
malicious objects; privileged object tricking; privileged thread tricking; 
accidental privilege use; trust; authentication; permissible data flow; 
reference; exchanged references;, high abstraction level; security model; 
method invocation; access checks; UNIX 8 bit problem; 8 bit 

Class Codes: C6130S (Data security); C6110J (Object-oriented programming) 
; C6150N (Distributed systems software) 

Numerical Indexing: word length 8.0E+00 bit 

Copyright 1998, IEE 



11/5/7 (Item 7 from file: 2) 

DIALOG <R) File 2 : INSPEC 

(c) 2003 Institution of Electrical Engineers. All rts. reserv. 

5598279 INSPEC Abstract Number: A97 14-8734-006 

Title: Auditory and auditory- visual perception of clear and conversational 
speech 

Author(s): Heifer, K.S. 

Author Affiliation: Dept. of Commun. Disorders, Massachusetts Univ., 
Amherst, MA, USA 

Journal: Journal of Speech, Language, and Hearing Research vol.40, 
no. 2 p. 432-43 

Publisher: American Speech-Language-Hearing Assoc, 
Publication Date: April 1997 Country of Publication: USA 
ISSN: 1092-4388 

SICI: 1092-4 388 (199704 ) 4 0 : 2L. 432 :AAVP; 1-X 
Material Identity Number: G224-97002 

U.S. Copyright Clearance Center Code: 1092-4388/97/4002-0432 
Language: English Document Type: Journal Paper (JP) 
Treatment: Experimental (X) 

Abstract: Research has shown that speaking in a deliberately clear manner 
can improve the accuracy of auditory speech recognition. Allowing 

listeners access to visual speech cues also enhances speech 

understanding. Whether the nature of information provided try speaking 
clearly and by using visual speech cues is redundant has not been 

determined . This study examined how speaking mode (clear vs. 

conversational) and presentation mode (auditory vs. auditory-visual) 
influenced the perception of words within nonsense sentences. In Experiment 
1, 30 young listeners with normal hearing responded to videotaped stimuli 
presented audiovisually in the presence of background noise at one of three 
signal-to-noise ratios. In Experiment 2,' 9 participants returned for an 
additional assessment using auditory-only presentation. Results of these 
experiments showed significant effects of speaking mode (clear speech was 
easier to understand than was conversational speech) and presentation. mode 
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(auditory-visual presentation led to better performance than did 
auditory-only presentation) . The benefit of clear speech was greater for 
words occurring in the middle of sentences than for words at either the 
beginning or end of sentences for both auditory-only and auditory-visual 
presentation, whereas the greatest benefit from supplying visual cues was 
for words at the end of sentences spoken both clearly and conversationally 
The total benefit from speaking clearly and supplying visual cues was equal 
to the sum of each of these effects. Overall, the results suggest that 
speaking clearly and providing visual speech information provide 
complementary (rather than redundant) information. (23 Refs) 
Subfile: A 

Descriptors: hearing; speech recognition; visual perception 

Identifiers: clear speech; conversational speech; auditory-visual 
perception; auditory perception; visual speech cues; presentation mode; 
young listeners; normal hearing; videotaped stimuli; background noise; 
signal-to-noise ratio; sentences; deliberately clear manner; auditory 
speech recognition accuracy improvement 

Class Codes: A8734 (Audition); A8736 (Speech and biocommunications ) ; 
A8732S ( Psychophysics of vision, visual perception, binocular vision) 

Copyright 1997, IEE 



11/5/8 (Item 8 from file: 2) 

DIALOG (R) File 2 : INSPEC 

(c) 2003 Institution of Electrical Engineers. All rts. reserv. 

5217324 INSPEC Abstract Number: B9605-6150M-005 , C9605-564 0-006 
Title: Routing on longest- matching prefixes 
Author(s): Doeringer, W.; Karjoth, G.; Nassehi, M. 
Author Affiliation: FH Worms, Germany 

Journal: IEEE/ACM Transactions on Networking vol.4, no.l p. 86-97 
Publisher: IEEE; ACM, 

Publication Date: Feb. 1996 Country of Publication: USA f 

CODEN: IEANEP ISSN: 1063-6692 

SICI: 1063-6692 (199602) 4 :1L. 86: RLMP; 1-0 

Material Identity Number: P946-96002 

U.S. Copyright Clearance Center Code: 1063-6692/96/$05 . 00 
Document Number: S1063-6692 ( 96) 00610-3 

Language: English Document Type: Journal Paper (JP) 
Treatment: Practical (P); Theoretical (T) 

Abstract: This article describes the dynamic prefix tries, a novel data 
structure with algorithms for insertion, deletion, and retrieval to build 
and maintain a dynamic database of binary keys of arbitrary length. These 
tries extend the concepts of compact digital (Patricia) tries to support 
the storage of prefixes and to guarantee retrieval times at most linear in 
the length of the input key irrespective of the trie size, even when 
searching for longest- matching prefixes. The new design permits very 
efficient, simple and nonrecursive implementations of small code size and 
minimal storage requirements. Insert and delete operations have strictly 
local effects, and their particular sequence is irrelevant for the 
structure of the resulting trie, thus maintaining at all times the desired 
storage and computational efficiency. The algorithms have bees successfully 
employed in experimental communication systems and products for a variety 
of networking functions such as address resolution, maintenance and 
verification of access control lists , and high-performance routing 
tables in operating system kernels. (28 Refs) 

Subfile: B C 

Descriptors: access protocols; computer networks; network operating 
systems; operating system kernels; telecommunication network routing; tree 
data structures 

Identifiers: longest- matching prefixes; routing; dynamic prefix tries; 
data structure; insertion; deletion; retrieval; dynamic database; binary 
keys; compact digital tries; input key; operating system kernels; small 
code size; minimal storage; computational efficiency; communication systems 
; networking functions; address resolution; maintenance; verification; 
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Class Codes: B6150M (Protocols); B6210L (Computer communications); B6150P 
(Communication network design and planning) ; C5640 (Protocols) ; C6120 ( 
File organisation); C5620 (Computer networks and techniques); C6150N ( 
Distributed systems software) 
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4818725 INSPEC Abstract Number: C94 12-6130S-045 
Title: Implementing execution controls in Unix 

Author(s): Gamble, T. 

Author Affiliation: WilTel Network Services, USA 

Conference Title: Proceedings of the Seventh Systems Administration 
Conference (LISA VII) p. 237-42 

Publisher: USENIX Assoc, Berkeley, CA, USA 

Publication Date: 1993 Country of Publication: USA v+256+suppl. pp. 
Conference Title: Proceedings of the Seventh Systems Administration 
Conference (LISA VII) 

Conference Date: 1-5 Nov. 1993 Conference Location: Monterey, CA, USA 
Language: English Document Type: Conference Paper (PA) 
Treatment: Practical (P) 

Abstract: Current implementations of UNIX offer security features in the 
form of discretionary access controls (DACs) . DACs are implemented with 
file access- permissions and access control lists (ACLs) . 
Unfortunately, neither of these facilities provide for access control to 
active processes. In order to provide many users access to a process (and 
its associated data) the current practice at our site is to establish a 
group account, where members on a project team share the login and password 
for an application. This practice is both insecure, and a violation of our 
site's security policies. The paper describes the implementation of a new 
tool, medex, which eliminates the need for group login accounts. Medex 
mediates the access of. users to privileged accounts and executables. The 
history behind our use of group accounts and a complete methodology for 
UNIX application management are presented. Details of the implementation of 
medex, including its interaction with the existing security features of 
UNIX, are given. The tool utilizes execution control lists (ECLs) as a 
means to allow controlled execution of programs under accounts other than 
the current login. Medex also re-authenticates the user's password upon 
each instantiation and maintains an audit trail via log files or the use of 
the UNIX syslog facility. A complete project management example utilizing 
medex is given along with a comparison to related tools. (8 Refs) 

Subfile: C 

Descriptors: authorisation; Unix 

Identifiers: Unix; execution controls; security features; discretionary 
access controls; file access permissions ; access ' control lists ; 
active processes; group account; password; login; medex; executables; 
history; group accounts; execution control lists; password 
reauthentif ication; audit trail; log files; UNIX syslog facility; project 
management; tools 

Class Codes: C6130S (Data security); C6150J (Operating systems) 
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Conference Title: Proceedings of Supercomputing ? 89 p. 693-8 
Publisher: ACM, New York, NY, USA 

Publication Date: 1989 Country of Publication: USA xviii+849 pp. 
ISBN: 0 89791 341 8 

U.S. Copyright Clearance Center Code: 0 89791 341 8 /89/001 1-0693$01 . 00 
Conference Sponsor: ACM; IEEE 

Conference Date: 13-17 Nov. 1989 Conference Location: Reno, NV, USA 
Language: English Document Type: Conference Paper (PA) 
Treatment: Practical (P) 

Abstract: The author critiques some security mechanisms in most versions 
of the Unix operating system and suggests more effective tools that either 
have working prototypes or have been implemented, for example in secure 
Unix systems. Although no computer (not even a secure one) is impenetrable, 
breaking into systems with these alternate mechanisms will cost more, 
require more skill, and be more easily detected than penetrations of 
systems without these mechanisms. The mechanisms described fall into four 
classes (with considerable overlap) . User authentication at the local host 
affirms the identity of the person using the computers. The principle of 
least privilege dictates that properly authenticated users should have 
rights precisely sufficient to perform their tasks, and system 
administration functions should be compartmentalized ; to this end, 
access control lists or capabilities should either replace or augment 
the default Unix protection system, and mandatory access controls 
implementing multilevel security models and integrity mechanisms should be 
available. Since most users access supercomputing environments using 
networks, the third class of mechanisms augments authentication (where 
feasible). As no security is perfect,. the fourth class of mechanism logs 
events that may indicate possible security violations; this will allow 
the reconstruction of a successful penetration (if discovered) , or possibly 
the detection of an attempted penetration. (40 Refs) 
Subfile: C 

Descriptors: parallel processing; security of data; Unix 
Identifiers: user authentication; UNIX security; supercomputing 

environment; working prototypes; system administration functions; access 

control lists ; integrity mechanisms 
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Title: Corporate communications and the legal environment: the summary 
annual report and the shareholder communication rules 

Author (s): Brown, J.R., Jr. 

Author Affiliation: Coll. of Law, Denver Univ., CO, USA 

Journal: IEEE Transactions on Professional Communications vol.32, no . 2 
p. 120-4 

Publication Date: June 1989 Country of Publication: USA 
CODEN: IEPCBU ISSN: 0361-1434 

U.S. Copyright Clearance Center Code: 0361-1434/89/0600-0120$01 . 00 
Language: English Document Type: Journal Paper (JP) 
' Treatment: Practical (P) 
Abstract: The US Federal Securities Laws extensively regulate disclosure 
by publicly traded companies. Overregulation has sometimes hindered 
management's ability to develop effective and timely communications. The 
author discusses how two recent developments have returned some degree of 
flexibility and control over the communication process to management. In 
January 1986, the commission approved the use of the summary annual report. 
Unlike conventional glossy annual reports, summary reports are subject to 
substantially less regulation. Companies largely have a free hand to 
determine the contents of the reports, raising the prospect of shorter, 
more readable, and more effective documents. The Commission also adopted 
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rules providing companies with access to lists of shareholders holding 
stock in street name and nominee accounts. With the information, companies 
can mail corporate communications directly to beneficial owners. Direct 
communications will permit more frequent communications at reduced costs. 
(5 Refs) 
Subfile: B 

Descriptors: legislation; professional aspects; technical presentation 
Identifiers: legal environment; summary annual report; shareholder 

communication rules; US Federal Securities Laws; timely communications; 

communication process; shareholders 

Class Codes: B0140 (Administration and management) 
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Title: Design rationale for Psyche, a general -purpose multiprocessor 
operating system 

Author (s) : Scott, M.L.; LeBlanc, T.J.; Marsh, B.D. 

Author Affiliation: Dept. of Comput . Sci., Rochester Univ., NY, USA 
Conference Title: Proceedings of the 1988 International Conference on 
Parallel Processing p. 255-62 vol.2 
Editor{s): Briggs, F.A. 

Publisher: Pennsylvania State Univ, University Park, PA, USA 
Publication Date: 1988 Country of Publication: USA 3 vol. 

(xii+461+x+262+xiii+311) pp. 
ISBN: 0 271 00654 4 

Conference Sponsor: Pennsylvania State Univ 

Conference Date: 15-19 Aug. 1988 Conference Location: University Park, 
PA, USA 

Availability: Penn State Press, University Park, PA, USA 
Language: English Document Type: Conference Paper (PA) 
Treatment: Practical (P) 

Abstract: The Psyche project at the University of Rochester aims to 
develop a high-performance operating system to support a wise variety of 
models for parallel programming. It is predicted on the conviction that no 
one model of process state or style of communication will prove appropriate 
for all applications, but that shared-memory multiprocessors (particularly 
the scalable NUMA variety) can and should support all models. Psyche 
facilitates dynamic sharing by providing a user interface based on passive 
data abstractions in a uniform virtual address space. It ensures that users 
pay for protection only when it is required by permitting lazy evaluation 
of protection policies implemented with keys and access lists . The data 
abstractions define conventions for sharing the uniform address space; the 
tradeoff between protection and performance determines the degree to 
which those conventions are enforced. ' In the absence of protection 
boundaries, access to a shared abstraction can be as efficient as a 
procedure call or a pointer dereference. (38 Refs) 

Subfile: C 

Descriptors: data structures; operating systems (computers); parallel 
programming; programming environments; time-sharing programs; user 
interfaces; virtual storage 

Identifiers: Psyche; multiprocessor operating system; University of 
Rochester; parallel programming; shared-memory multiprocessors; NUMA; 
dynamic sharing; user interface; passive data abstractions; virtual address 
space; lazy evaluation 

Class Codes: C6150J (Operating systems); C6115 (Programming support); 
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02735615 INSPEC Abstract Number: C86047784 
Title: An architecture for efficient LISP list access 
Author(s): Pleszkun, A.R.; Thazhuthaveetil , M.J. 

Author Affiliation: Dept. of Comput . Sci . , Wisconsin Univ., Madison, WI, 
USA 

Conference Title: 13th Annual International Symposium on Computer 
Architecture (Cat. No . 86CH2291-3) p. 191-8 

Publisher: IEEE Comput. Soc. Press, Washington, DC, USA 
Publication Date: 1986 Country of Publication: USA xiii+454 pp. 
ISBN: 0 8186 0719 X 

U.S. Copyright Clearance Center Code: 0884-74 95/86/0000-01 91$01 . 00 
Conference Sponsor: IEEE; ACM; Inf. Process. Soc. Japan 
Conference Date: 2-5 June 1986 Conference Location: Tokyo, Japan 
Language: English Document Type: Conference Paper (PA) 
Treatment: Practical (P) 

Abstract: A LISP machine architecture which supports efficient List 
manipulation is presented. This LISP architecture is organized as two 
processing units: a list processor (LP) which performs all-list related 
operations and manages the list memory, and an evaluation processor (EP) 
which maintains the addressing and control environment. The LP contains a 
translation table (LPT) which maps a small set of list identifiers into the 
physical memory addresses of objects. Essentially, the LP and LPT 
virtualize a list. The EP then operates on these virtualized lists. Such an 
organization permits the overlap of EP function evaluation with LP memory 
accesses and management, thus reducing the performance penalties typically 
associated with LISP list manipulation activities. Trace-driven simulations 
were used to evaluate this architecture. From the evaluation a relatively 
small LPT is seen to be sufficient, and to yield 'hit rates' on data 
accesses higher than those of a data cache of comparable size. (20 Refs) 

Subfile: C 

Descriptors: computer architecture; LISP; list processing; special 
purpose computers; virtual storage 

Identifiers: trace-driven simulations; virtual memory; list access ; 
LISP machine architecture; List manipulation; list processor; evaluation 
processor; translation table 
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Author(s): Simmons, D.; Berger, B.; Downing, G. 
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Journal: Electronic Imaging vol.3, no . 6 p. 76-9 
Publication Date: June 1984 Country of Publication: USA 
CODEN: ELIMEX ISSN: 0737-6553 

Language: English Document Type: Journal Paper (JP) 
Treatment: Practical (P); Product Review (R) 

Abstract: A single Multibus graphics controller, the VG-150, capable of 
displaying 14 08H* 1100V*1 pixels in a 60 Hz noninterlaced format, has been 
introduced by Datacube. Onboard intelligence is provided by a bit-slice 
bipolar processor which controls all onboard functions and implements both 
graphic and raster primitives. The microcode program which is stored in 
onboard PROMs determines the entire functionality of the VG-150. The 
VG-150 communicates with the host CPU through shared Multibus memory. Using 
the bipolar processor, the VG-150 uses DMA operations to read commands and 
data across the Multibus from the shared memory. The commands and data are 
stored in a display list format in the shared memory. The VG-150 can also 
access multiple display lists . (0 Refs) 
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Descriptors: computer graphic equipment; computer interfaces; display 
instrumentation 

Identifiers: graphic primitives; bit block transfer; Multibus graphics 
controller; VG-150; 60 Hz noninterlaced format; Datacube; bit-slice bipolar 
processor; raster primitives; microcode program; DMA operations; multiple 
display lists 
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graphic displays); C5610P (Peripheral interfaces) 



11/5/15 (Item 15 from file: 2) 

DIALOG (R) File 2 : INSPEC 

(c) 2003 Institution of Electrical Engineers. All rts. reserv. 

02338431 INSPEC Abstract Number: C84050617 
Title: Access control lists in capability environments 
Author (s): Lopriore, L. 

Author Affiliation: Istituto di Elaborazione dell 1 Inf ormazione, Consiglio 
Nazionale delle Ricerche, Pisa, Italy 

Journal: Technique et Science Inf ormatiques 
Country of Publication: France 
CODEN: TTSIDJ ISSN: 0752-4072 

Translated in: Technology and Science of Informatics vol.3, no. 3 p. 
163-74 

Publication Date: 1984 Country of Publication: UK 
CODEN: TTSIEK ISSN: 0264-7419 

Language: English Document Type: Journal Paper (JP) 
Treatment: Theoretical (T) 

Abstract: Control requirements for access to shared objects in computer 
systems have led machine architects to propose various mechanisms, among 
which the best-known are virtual memory and capability addressing. 
Implementation of control of access to an object, using capabilities, means 
working with concepts such as a group of objects or a protection domain, 
and involves bringing all the capabilities of the objects in the domain 
together in a capability list and, finally, obliging access to the domain 
to pass through that list. It is therefore a method of protection in which 
access control operates at the level of the requesting subject rather than 
at that of the object requested. At the opposite end of the scale, in file 
management, the aim is to preserve objects independently of the requester 
and therefore to apply control at the level of the requested file, using a 
list of authorised users. The author starts by comparing these two 
control methods, after which he tackles the question of implementing 

access control lists within a specific architecture built on 
capabilities. Having discussed that architecture, he studies file 
protection against accidental access. This requires that every user have a 
series of access rights to files. This method is based on the 
implementation of three elements: file management, list management and a 
directory, . all of them associated with capability lists for the objects 
appropriate to them. The file management system handles files without 

access control. The list management system handles both management and 
control of access rights. The directory operates as an interface between 
users and files. The main problem is to guarantee that the director 
identifies users unambiguously. The solution proposed uses 
pseudo-capabilities or capabilities containing a reference to a capability 
in a list of capabilities; these pseudo-capabilities allow the 
propagation of the right to designate a protected object without 
propagating access rights. (36 Refs) 
Subfile: C 

Descriptors: computer architecture; file organisation; security of data 
Identifiers: access control lists ; capability-based architecture; 
shared objects; computer systems; capability addressing; protection; file 
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Title: Random access in a list environment 
Author (s) : Lodi, E.; Luccio, F . ; Pagli, L . ; Santoro, N. 

Author Affiliation: Istituto di Sci . dell 1 Inf ormazione, Univ. of Pisa, 
Pisa, Italy 

Journal: Information Systems vol.2, no.l p. 11-17 
Publication Date: 1976 Country of Publication: UK 
CODEN: INSYD6 ISSN: 0306-4379 

Language: English Document Type: Journal Paper (JP) 
Treatment: Practical (P); Theoretical (T) 

Abstract: A memory allocation scheme for list structures (ral system) is 
proposed, which allows random access and search for the elements of the 
structure. A comparative study of classical list systems and ral systems 
is given, for the basic operations of search, insertion, deletion and 
sorting of the structure elements. It is shown that, in general, ral 
systems exhibit lower order expected time complexities for such operations, 
possibly at the expense of a reasonable increase in memory occupation. 
Allocation and processing of linear ordered lists and trees are discussed 
in particular. (6 Refs) 

Subfile: C 
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The use of tabling in logic programming allows bottom-up evaluation 
to be incorporated in a top-down framework, combining advantages of both. 
It is only recently that systems based on tabling are beginning to emerge 
and early experience with them suggests that table based resolution methods 
are practically viable. Therefore techniques to enhance the performance of 
tabling systems are becoming important. This Ph.D. dissertation is 
concerned with the design, implementation and experimental evaluation of 
data structures and algorithms for high-performance table access . 

The essence of our approach is centered around using 
<italic>tries</italic> as the basis for representing and manipulating 
tables. Tries provide complete discrimination for terms, and permit a 
lookup and possible insertion to be performed in a single pass through a 
term. A novel technique called <italic> substitution f actoring</italic> is 
also proposed to reduce the access cost for answers to be proportional to 
the size of the answer substitution, rather than to the size of the answer 
itself. Answer tries can be implemented both as interpreted structures and 
as compiled WAM-like code. When they are compiled, the speed of computing 
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substitutions through answer tries is competitive with the speed of unit 
facts compiled as WAM code, or asserted. 

While tries are efficient for variant based tabled evaluation, they 
are limited in their ability to recognize reusable subcomputations . By 
recognizing such computations and not redoing them, subsumption based 
tabling systems can yield superior performance. The main challenge here is 
the design of mechanisms that can efficiently reuse previously computed 
results. 

We propose a novel organization of tables called <italic>Dynamic 
Threaded Sequential Automata</italic> for subsumption based tabling and 
provide mechanisms to manipulate them with minimal overheads. We furnish 
experimental evidence that subsumption based tabling systems that use our 
techniques exhibit significantly better performance over those based on 
variants . 

Scheduling strategies that determine the order in which tabled 
answers are resolved against calls that consume them affect the performance 
of subsumption based engines in two significant ways. Firstly they can 
affect the degree of consumption of answers from incomplete tables, which 
is inherently more expensive than consuming answers from complete tables. 
Secondly by altering the order in which general and particular calls are 
made they affect the amount of program clause resolution resulting from the 
evaluation of a call. We develop concept of a scheduling strategy. We show 
that an optimal scheduling strategy <italic>does not exist</italic> . 

The paradigm of subsumption based tabling does not restrict our 
ability to handle programs with negation. We show that a subsumption engine 
can be used to compute the well-founded model of a general program. 

Finally, we show the practical realization of our ideas by describing 
their implementation, and demonstrate their efficiency by performance 
measurements . 
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A new access control model incorporating the notion of time and events 
is introduced. It allows the specification of fine-grained and flexible 
security policies which are sensitive to the operating environment. The 
system constraints, expressed in terms of access windows and obligations, 
are stored in extended access control lists . The addition of a 
capability mechanism gives another dimension of protection and added 
flexibility, so that the flexibility and expressive power of the system 
constraints is fully supported by the underlying mechanism. The approach is 

compared to several existing models and its expressive power is 
demonstrated by showing the new model can be used to specify different 
existing security models as well as some special problems. The model is 
then adapted to work in a distributed environment. 
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REDUCING LIST ACCESS TIME FOR LISP EXECUTION 
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Prefetching items into cache can either increase or decrease memory 
access time, depending on how well the prefetching algorithm matches the 
memory reference pattern. A popular prefetching algorithm is one block 
lookahead (OBL) . Caches help to improve system performance mainly because 
of the localities that exist in most program executions. The locality 
characteristics of list reference patterns are: both car and cdr pointer 
distances are likely to be small, pointers can point in either the forward 
or backward direction, linearization often shortens these distances, and 
cdr encoding is an efficient way to represent lists. Two algorithms, called 
two-way reflection prefetch (TRP) and forward one- block -lookahead and 
backward reflection prefetch (FOBRP) , are designed to reduce list access 
time due to cache misses by taking advantage of these characteristics. 

Prefetching algorithms have usually been evaluated and selected 
according to the cache miss ratio and bus transfer ratio achieved. However, 
bus contention is one issue that is not properly reflected by miss ratio 
and transfer ratio alone. Thus, a timing model is designed and used to 
provide information in terms' of time elapsed for accessing. This model 
estimates individual delay components, miss delay, contention delay, 
load-through completion wait, and prefetching completion wait, so that 
situations concerning bus contentions can be appropriately analyzed. The 
timing model determines the efficiency of a prefetching algorithm by its 
effective access time and its individual delay components, as well as its 
miss ratio and transfer ratio. 

The performance of the proposed prefetching algorithms are evaluated 
by running several Lisp benchmarks, both with and without linearization, on 
a Lisp interpreter, and their memory traces are recorded. These traces are 
then fed to the timing model to evaluate the effectiveness of the proposed 
algorithms. Timing simulation shows: (1) increasing cache size is the best 
way to achieve better performance when cache size is small, (2) TRP is the 
best prefetching algorithm for all data accessing if a moderate size cache 
is provided, (3) FOBRP is the best prefetching algorithm for list 
prefetching, and (4) judicious application of linearization enhances the 
performance regardless of whether prefetching is used. 
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Measurements were made on several LISP programs to determine the 
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percent execution time (excluding input/output and garbage collection) 
spent in a targeted set of high-level LISP functions. The monitored 
functions were functions such as get and length whose execution times are 
somehow dependent upon the number of elements in their top-level list 
argument. The total targeted-f unction usage in the measured programs ranged 
from 15% to 75%. In every program except one, a single high-level function 
accounted for over 10% of the measured execution time. The measurements 
emphasize the point that use of list structure for data storage reduces the 
efficiency of LISP programs on current LISP architectures because of serial 
access to list elements. 

An architecture is proposed which provides constant time access to 
top-level list elements. The ALISP architecture uses content-addressable 
memory (CAM) as a LISP object cache. An ALISP list node residing in CAM 
consists of car, cdr-tag, and cdr-num fields. The car field contains the 
traditional LISP atom or pointer value. The cdr-tag field is used as a 
common tag for all of the nodes in the cdr-chain (top-level list nodes) . 
The cdr-num field contains the position of the node in the cdr-chain with 
the last node of the cdr-chain given a cdr-num of zero and the first node 
assigned a cdr-num value equal to the number of top-level nodes minus one. 
A search by the CAM on the cdr-tag and cdr-num fields provides constant 
time access to any node in the cdr-chain. The ALISP node format supports 
all traditional LISP functions. The searching capability of the CAM and the 
ALISP node format provide constant time execution for the functions get, 
memq, nth, and length. The CAM makes the ALISP architecture well suited for 
many LISP applications which require a powerful search capability. 

A simulation of the ALISP architecture on a problem involving 
theorem proving by resolution in the propositional calculus demonstrated a 
speedup of between 200% to 400% over conventional architectures. Perhaps 
the most important aspect of the ALISP architecture is that it allows the 
use of list structure for data storage without the efficiency penalty found 
on current LISP architectures. (Abstract shortened with permission of 
author . ) 
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Microsoft Excel 97 — Using AutoFilter 

Bird, Linda 

Smart Computing in Plain English , February 1, 1999 , vlO n2 p59, 1 
Page (s) 

ISSN : 1093-4170 
Company Name: Microsoft 

URL: http: //www. microsoft . com http : //www .microsoft . com 
Product Name: Microsoft Excel 97; Microsoft Windows 95 
Languages: English 

Document Type: Articles, News & Columns 

Hardware/Software Compatibility: IBM PC Compatible; Microsoft Windows 

95 

Geographic Location: United States 

Explains how to use the Microsoft Excel 97 spreadsheet's AutoFilter 
feature and computing instructions for the intermediate user of Microsoft 
Windows 95. States that the AutoFilter feature allows the spreadsheet 
creator to temporarily hide all the rows that are not required for viewing 
or printing. Reports that the user can filter any worksheet range that is 
considered a list. Adds that a list typically includes column headings on 
the first row. Explains how to click on a cell within the list , and 
access, the data menu for various options. States that filtering options 
include: exact match , part number, name, Top 10, bottom values, or 
percentages. Says these items can be mixed and matched or used 
conditionally with another column's data. Mentions that in order to 
redisplay the data, user can click on the column's drop down menu and 
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choose ^All.*' Includes one screen display, (bjp) 

Descriptors: Computer Instruction; Spreadsheet; Filtering; Tutorial 
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ValiCert offers new solutions for secure Internet transactions 

Information Today , January 1, 1998 , vl5 nl p38, 1 Page(s) 
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Company Name: ValiCert 

URL : http : / /www . valicert . com 

Product Name: ValiCert Toolkit; ValiCert Server; ValiCert Service 
Languages : English 

Document Type: Product Announcement 
Geographic Location: United States 

Announces that ValiCert, Inc. of Sunnyvale, CA (408) has introduced 
three core products in the field of certificate validity management. Among 
these is the ValiCert Toolkit, targeted at developers writing applications 
that consume certificates, by which vendors can enable products to 
efficiently check certificate validity in Internet or intranet 
communications. Also included is the ValiCert Server, which provides all 
the technology necessary for confirmation issuance in an intranet setting, 
and the ValiCert Service, a clearinghouse for checking the validity of 
digital certificates across organizational boundaries. Claims that the 
ValiCert Service will enable issuers of certificates to distribute their 
certificate revocation lists in a timely, secure manner. Explains that 
ValiCert 's technology and services allow users to determine the 
validity of X.509 digital certificates for secure electronic communications 
and commerce. Includes one screen display, (jo) 

Descriptors: Digital Certificates; Security; Internet; Online 
Transaction Processing; Electronic Commerce; Web Tools; Intranets 

Identifiers: ValiCert Toolkit; ValiCert Server; ValiCert Service; 
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Friendly takeovers: remote control software — The new crop of Windows 
95 remote-control packages boast multitasking, ease of use, and fast 
performance. But do they. . . 

Boyle, Padraic; Rigney, Steve 

PC Magazine , August 1, 1996 , vl5 nl4 p219-263, 19 Page(s) 
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Company Name: Stac; Citrix Systems 
Product Name: ReachOut; WinFrame 
Languages : English 

Document Type: Buyer and Vendor Guide 
Grade (of Product Reviewed) : A 

Hardware/Software Compatibility: IBM PC Compatible; Microsoft Windows 
95; Microsoft Windows NT; OS/2 

Geographic Location: United States 

Introduces a buyers' guide to remote-control programs. Features a table 
comparing 47 specifications of seven products. Another table summarizes 
remote access options (remote control, remote node, and single-purpose 
remote app) describing how each works, typical uses, pros and cons, and 
products and solutions. The seven programs reviewed are able to run as host 
and remote clients under. Windows 95 and perform remote-control tasks 
directly over dial-up lines. Windows 3.x, NT, and OS/2 versions were 
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evaluated for their ability to work with Windows 95 and NT hosts. Includes 
sidebars on: Citrix's WinFrame, which allows multiple users simultaneous 
control of a single PC; remote node technology; remote control over a LAN; 
and remote control for OS/2. Provides benchmark test results. ReachOut 5.05 
($149) from Stac Inc., San Diego, CA (800, 619) is the Editors 1 Choice. 
Includes one diagram, nine screen displays, and three sidebars, (djd) 

Descriptors: Remote Computing; Local Area Networks; Software Review; 
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Browsing gone bad — If your text blinks for one, it better blink for 
them all — -here's how to develop for a multibrowser environment 

Crowley, Aileen 

PC WEEK , May 20, 1996 , vl3 n20 p49, 63, 2 Page(s) 
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Languages : English 

Document Type: Feature Articles and News 
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Discusses how to develop a World Wide Web site that is accessible to its 
target audience. Notes that building a Web site for the Internet is 
relatively complex, compared to a situation where all users have the same 
browser, bandwidth, and viewing capabilities. Indicates that although 
frames are scrolling windows within a Web page, if a user's browser doesn't 
support them, the page could appear blank. Says that you can circumvent 
such issues by offering Web visitors a choice of how they want to view the 
page. That is, those with Netscape Navigator could choose the graphics 
option with access to tables and frames, while a low-end option would 
allow less robust browsers to view the page without the extra options. 
Claims that this would add up to 50 percent to the overall upkeep of the 
site. Recommends testing the size of the graphics to be downloaded and 
limiting the size of the main page to about 40K bytes. Includes one table, 
(jo) 

Descriptors: Web Sites; Internet; Product Development; User Interface 
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MDNS: In-house management of outsourced networks — Managed data network 
services rely on virtual networks, which free users from day-to-day tasks 
but still allow some measure of control 

Roussel, Anne-Marie 

Data Communications , July 1, 1992 , v21, nlO p78-84+, 5 Page(s) 
ISSN: 0363-6399 
Languages: English 

Document Type: Buyer and Vendor Guide 
Geographic Location: United States 

Presents a vendor guide to international managed data network service 
providers. Features a table comparing access speeds, network 

architecture, countries with operator-owned nodes, countries with local 
technical support, network management from customer premises, and expansion 
plans for 14 products from 11 companies. Lists city locations of the 
vendors. Includes a sidebar ,f PTTs and Their Projects'' (p. 80) by 
Anne-Marie Roussel, which reports on alliances formed by PTTs with 
companies to become global players in the virtual private network market. 
Includes a table and a digitized image, (tbc) 

Descriptors: Telecommunications; Vendor Guide 
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Remote-access communications software: Packages help users keep their 
distance without losing control 

Karon, Paul 

PC Week , Aug 19 1986 , v3 n33 p71-81, 9 Pages 

ISSN: 0740-1604 

Languages: English 

Document Type: Article 

Geographic Location: United States 

Presents a buyers 1 guide to remote-access communications software. Says 
that these packages " allow a PC operator to use a microcomputer at one 
location to operate another PC at a distant location". Notes that there are 
two basic types of programs: those used primarily for communications and 
those used for remote operation. Includes a chart comparing the system 
characteristics, dialing features, program features, function modes, and 
security of over 4 0 communications programs with remote- access 
capabilities, a list of related definitions, and a directory to over 50 
communications software vendors. 

Descriptors: DATA COMMUNICATION; VENDOR GUIDE; DIRECTORIES; CONSUMER 
INFORMATION 
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PRODUCT NAMES: Day-Timer Digital (768308); Visto Briefcase (689131); 
Yahoo! Calendar (753858) 

TITLE: Web Planners Need More Time 

AUTHOR: Essex, David 

SOURCE: Computerworld, v33 n32 p75(l) Aug 9, 1999 
ISSN: 0010-4841 

HOMEPAGE: http: //www . computerworld. com 

RECORD TYPE: Review 

REVIEW TYPE: Product Comparison 

GRADE: Product Comparison, "No Rating 

Day-Timer's Day-Timer Digital, Visto's Visto Briefcase, and Yahoo ! 1 s Yahoo! 
Calendar are compared Web-based personal information managers (PIMs) . 
Such products now constitute a small industry of their own, with such 
features as the ability to publish a schedule to anyone with a Web browser. 
The tools also provide universal, anytime access to lists of scheduled 
tasks, appointments, and meetings. The tools do not replace an often-used 
PalmPilot, notebook-based PIM, or corporate scheduling program. Analysts 
expect the number of registered users of free Web-based calendars in the 
U.S. to almost double in 2000 to 2 . 2 million, and half are active users. No 
provider currently provides comprehensive functionality, but if vendors 
allow users to replicate their desktops from any location and make the 
information available by phone, PDA, PC, and kiosk, Web-based calendaring 
could be very popular. Also expected to emerge are direct links to tickets 
for calendar events. Yahoo! Calendar has the same almost old-fashioned ^ 
text-rich interface that surprisingly is the best way to view information 
on the Internet. Day-Timer Digital has the best-designed and refined screen 
interface, and, like the other products, provides a public calendar that 
shows events related to favorite topics. Visto Briefcase is the most 
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graphical and full-featured of the three, and its calendar applet links to 
its directory of events. 

COMPANY NAME: Day-Timers Inc (592552); Visto Corp (641219); Yahoo! Inc 
(610909) 

SPECIAL FEATURE: Screen Layouts 

DESCRIPTORS: Calendars; Desk Accessories; Internet Utilities; Personal 

Information Management 
REVISION DATE: 20020819 
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PRODUCT NAMES: User Registration Tool (URT) 1.2 (768821); Access 
Control List Manager (768839 

TITLE: Cisco eases access control list , directory administration 

AUTHOR: Krill, Paul 

SOURCE: InfoWorld, v21 n32 p40F(l) Aug 9, 1999 
ISSN: 0199-6649 

HOMEPAGE : http: //www. inf oworld. com 

RECORD TYPE: Review 

REVIEW TYPE: Product Analysis 

GRADE: Product Analysis, No Rating 

Cisco Systems 1 User Registration Tool (URT) 1.2 and Access Control List 
Manager (ACLM) are new products that ease tasks required to establish 
network policies based on Cisco's hardware devices. ACLM manages access 
control lists stored in routers that control traffic flow and offer a 
level of access security. URT 1.2 allows Novell's and Microsoft directory 
users to establish network policies and privileges. It monitors users 1 
activities to determine when they are connected and where they are 
mapped, from the vantage point of policy to virtual LANs in the network. 
ACLM allows administrators to define security and traffic- control 
policies for management over Cisco devices. Access control lists are 
often used to secure Internet access. ACLM can centrally manage access 
control lists through a template library, and access list 
configurations are manageable for groups of users and for devices and 
network services, including virtual private networks (VPNs), Web servers, 
and e-mail servers. ACLM is based on CiscoWorks 2000 network management 
technology, and also permits traffic management over multiprotocol 
extranet and intranet networks. ACLM operates -with Internetwork Operating 
System (IOS) from Cisco. With URT 1.2, Novell Directory Services (NDS) and 
Microsoft Windows NT users can assign user names and set them from within 
directories; network policies and privileges. 

COMPANY NAME: Cisco Systems Inc (4 65828) 
SPECIAL FEATURE: Screen Layouts 

DESCRIPTORS: Computer Security; Extranets; Internet Security; 

Internetworking; Intranets; Network Administration; Network Directories 

; System Monitoring 
REVISION DATE: 20020630 
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PRODUCT NAMES: ChemDex Plus (764001); Oracle (004233) 

TITLE: Chaos and Community: Bringing order to chemistry on the Web 

AUTHOR: Town, Bill 

SOURCE: American Laboratory, v31 n6 p34(3) Mar 1999 
ISSN: 0044-7749 

HOMEPAGE: http: //www. iscpubs . com 

RECORD TYPE: Review 

REVIEW TYPE: Product Analysis 

GRADE: Product Analysis, No Rating 

ChemWeb' s ChemDex Plus, a World Wide Web site that reviews world chemistry 
Web sites and shows them in an Oracle database, provides a model for 
structuring, searching, and improving the quality of chemical Web 
information. Merging a relational database with peer-reviewed content, the 
site's listing eases access to valuable chemistry resources. Members of 
the chemistry community are invited to create their own brand of order 
within the intrinsically chaotic Web. ChemDex Plus can be called a jump 
site, one of a proliferation of Web sites that host thousands of URLs. 
ChemDex Plus often monitors the changing content and quality of sites, and 
offers a 50- to 300-word description of each one. Users can figure out what 
is inside each site and can determine what is valuable. ChemDex also 
allows users to cross-browse contents, beginning with four master 
categories: chemistry, technique, content, and site types. ChemDex Plus's 
top sites were assessed beginning late in 1998. Reviews were published on 
the ChemWeb site. ChemDex Plus will make available a conference diary and a 
directory of people and institutions, all of which are taken from the same 
data repository. Any URL of note is listed at ChemWeb as a matter of 
course, since the purpose of ChemDex Plus is to ease and increase access to 
chemistry World Wide Web resources. 

COMPANY NAME: ChemWeb Inc (666122); Oracle Corp (010740) 

DESCRIPTORS: Chemical Industry; Indexing; Information Retrieval; Internet; 

Laboratories; Portals; Science 
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PRODUCT NAMES: ValiCert Enterprise VA 2 . 0 (747505) 

TITLE : Enterprise suite lends validity to certificates 

AUTHOR: Balfour, Gail 

SOURCE: Computerworld Canada, vl5 n3 p28(l) Feb 12, 1999 
ISSN: 1484-9089 

HOMEPAGE: http://www.lti.on.ca 

RECORD TYPE: Review 

REVIEW TYPE: Product Analysis 

GRADE: Product Analysis, No Rating 

ValiCert ? s ValiCert Enterprise VA 2 . 0 works with a user's certificate 
authority software to provide validity status responses for any X.509 
certificate. It uses many modern validation methods, including Certificate 
Revocation Lists (CRLs), On-line Certificate Status Protocol (OCSP) , RL 
Distribution Points (RLDP) , and ValiCert f s Certificate Revocation Tree 
(CRT) . Online and offline status checking are supported, and an E-Mail 
Validator is included that plugs into Secure/Multipurpose Internet Mail 
Extensions) (S/MIME) e-mail clients. Also provided are an Address Book 
Validator that scans certificates within an e-mail name and address took to 
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determine if they are validated, and a Browser Validator that allows 
end-users to be notified if a commerce server is using a Secure Sockets 
Layer certificate that has been revoked. A new Validator Toolkit allows 
integration into applications, and a VA Publisher distributes regularly 
updated CRL information from multiple CAs to ValiCert f s server. On-Line 
Certificate Status Protocol support is also new to ValiCert Enterprise, as 
are plug-ins to certificate-supported applications, including Outlook 98, 
Windows Address Book, and multiple Web servers and browsers. 

COMPANY NAME: ValiCert (639273) 
SPECIAL FEATURE: Screen Layouts 

DESCRIPTORS: Communications Protocols; Computer Security; E-Mail Utilities 

; Internet Security; Internet Utilities 
REVISION DATE: 20010330 



11/5/31 (Item 5 from file: 256) 

DIALOG (R) File 256 : Sof tBase : Reviews , Companies&Prods . 
(c)2003 Info. Sources Inc. All rts. reserv. 

00115915 DOCUMENT TYPE: Review 

PRODUCT NAMES: Mailing Lists (833657); E-Mail (830031) 

TITLE: E-Mail List Directories Put New Face on an Old Service 

AUTHOR: Virzi, Anna Maria 

SOURCE: Internet World, v5 nl3 p35(l) Apr 5, 1999 

ISSN: 1097-8291 

HOMEPAGE: http: //www. iw. com 

RECORD TYPE: Review 

REVIEW TYPE: Product Analysis 

GRADE: Product Analysis, No Rating 

Three e-mail list directory services are discussed and compared here, 
eGroups, Onelist, and Topica. All three are new ventures launched within 
the past year that so far are finding enough market to share in reaching 
businesses needing to reach large e-mail lists. Topica provides list 
access to more than 30,000 e-mail list topics and lets users access and 
read e-mail threads from any discussion site based at the company's site. 
The company hopes to have over 100,000 sites listed soon. Onelist is well 
suited for new Web users and seasoned list users alike and recently added a 
feature called Ask Dr. Science, which links users directly to the list's 
17,000 subscriber members. eGroups provides tools for users to create and 
manage their own e-mail lists. The site allows business users to 
distribute targeted, solicited e-mailings that link users directly to the 
company's own e-commerce Web site. All three sites have plans to become 
more fee-based in the future to generate revenue. 

COMPANY NAME: Vendor Independent (999999) 
SPECIAL FEATURE: Charts 

DESCRIPTORS: BBS (Bulletin Board Systems); E-Mail; Mailing Lists; Software 

Marketing 
REVISION DATE: 19990830 
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AUTHOR: Schultz, Keith 

SOURCE: InternetWeek, ' v745 p36(l) Dec 14, 1998 
ISSN: 0746-8121 

HOMEPAGE: http: //www. internetwk . com 

RECORD TYPE: Review 
REVIEW TYPE: Review 
GRADE : A 

Secure Computing's Sidewinder Security Server 4.0 adds plenty of new 
features in this release. The product is an application-level proxy 
firewall, which is woven into a hardened version of. BSD UNIX. It includes 
some new proxies, VPN support, and an automatic failover feature. This 
version still retains a lot of the popular features of version 3.0. 
Automatic failover support is similar in concept to server clustering, and 
allows a backup Sidewinder to take the place of the primary one in case of 
failure. The backup Sidewinder is a hot-standby firewall. The heart of the 
system is the modified BSD UNIX operating system, and Sidewinder's security 
functions are integrated directly into the operating system, not just 
running on top of them. The Type Enforcement technology helps to secure the 
OS, along with enforcing mandatory access control and denying access to the 
ROOT user account. Sidewinder works with standard Internet service proxies, 
as well as X.500/X.400 and Oracle proxies. Sidewinder may have some trouble 
accommodating streaming multimedia, however. The management console is an X 
Windows application that lets users manage the local Sidewinder firewall. 
The interface is well organized and easy to navigate. Security policy is 
determined in the. Access Control List database. 

COMPANY NAME: Secure Computing Corp (586374) 
SPECIAL FEATURE: Screen Layouts 

DESCRIPTORS: Computer Security; Fault Tolerance; Firewalls; Internet 
Security; Internet Utilities; Internetworking; Intranets; Network 
Administration; System Monitoring; UNIX BSD; X Window 

REVISION DATE: 20020630 
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PRODUCT NAMES : Check Point Firewall-1 (531731) ; NetFortress Heatseeker 
Pro 1.0 (691321); GUARDIAN 3.0 (626228); Eagle NT 5.0.1 (565083); 
Firewall for NT 3.1 (677001) 

TITLE: NT Firewalls: Tough Enough 

AUTHOR: Newman, David Holzbaur, Helen Carter, Michael 
SOURCE: Data Communications, v27 n5 p60(10) Apr 1998 
ISSN: 0363-6399 

RECORD TYPE: Review 

REVIEW TYPE: Product Comparison 

GRADE: Product Comparison, No Rating 

Checkpoint's Checkpoint Firewall-1, Fortress Technologies' Net fortress 
Heatseeker Pro 1.0, Netguard's now LanOptics' Guardian 3.0, Raptor Systems' 
now Axent Technologies' Eagle NT 5.0.1, and Secure Computing's FireWall for 
NT 3.1 are among software-based firewalls tested. Two products receive the 
Testers' Choice awards: Firewall-1 from Checkpoint Software Technologies 
and Guardian from LanOptics. Eagle NT gets honorable mention for its 
enhanced management interface and excellent reporting tools. The testing 
does not certify the firewalls as safe. Experts demonstrated that the code 
does what it should do, but does not say that the firewalls are 
invulnerable. Netguard and Secure Computing provide proxies and packet 
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filtering; the latter function inspects each packet received and 
determines whether the packet should be forwarded or dropped, after 
checking against a table of access control rules. All the products 
tested with the exception of Heatseeker Pro ship with included network 
address translation (NAT), while Eagle NT and Secure Computing 1 s FireWall 
only work with NAT turned on. During testing, Safesuite, an intrusion 
detection tool from Internet Security Systems, tests each firewall with 288 
different invasions. All tests used a firewall with two interfaces and a 
straightforward rule set that permits only a few services. 

COMPANY NAME: Check Point Software Technologies Ltd (594644); Fortress 
Technologies Inc (618926); LanOptics Ltd (621439); Symantec Corp 
(386251); Secure Computing Corp (586374) 

SPECIAL FEATURE: Charts Buyers Guides Graphs 

DESCRIPTORS: Computer Security; Firewalls; IBM PC & Compatibles; Internet 
Security; Internetworking; Intranets; Network Administration; System 
Monitoring; Windows NT/2000 

REVISION DATE: 20020630 
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TITLE: IMAP Mail Servers 

AUTHOR: Seachrist, David 

SOURCE: Computing Canada, v23 n9 p30(2) Apr 28, 1997 
ISSN: 0319-0161 

HOMEPAGE: http: //www . plesman . com/cc 

RECORD TYPE: Review 

REVIEW TYPE: Product Comparison 

GRADE: Product Comparison, No Rating 

Fujitsu America's TeamWare Mail, DEC Internet Software's AltaVista Mail 
Server 97, and Netscape Communications 1 Netscape Mail Server are Internet 
Message Access Protocol (IMAP) products compared . The tools allow 
current Internet mail technologies to extend into markets for collaborative 
computing, and they deal with issues related to gaining regular access to 
Internet e-mail from multiple computers. For users who find enterprise 
solutions too costly or otherwise unacceptable for their own environments, 
but who want to offer global e-mail to workers requiring remote access to 
electronic mailboxes, any of the products compared could be just the tool 
needed. TeamWare is the most flexible and usable, while AltaVista Mail 
Server 97 is the easiest to learn. Netscape Mail Server is also very 
versatile and usable, but gets a slightly lower rating than TeamWare. None 
of the applications support IMAP access control lists (ACLs) , but Mail 
Server and TeamWare provide ways to limit access according to domain name. 
TeamWare is the editors 1 choice because it is the most versatile of all the 
programs, with features not provided by the other tools. These include 
mailbox and message quotas, mail database backup and restore, and 
Lightweight Directory Access Protocol (LDAP) services. 

COMPANY NAME: Fujitsu America Inc (422011); AltaVista Co (658073); 

Netscape Communications Canada Inc (617351) 
SPECIAL FEATURE: Tables Screen Layouts Graphs 

DESCRIPTORS: Conferencing; E-Mail; E-Mail Utilities; Network Software; 

Remote Network Access 
REVISION DATE: 19990830 
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GRADE : A 

Data Description's Data Desk 6.0, a fast Windows version of the popular 
Macintosh statistics package, gets very good marks overall, with excellent 
capability and performance, and good usability, interoperability, and 
manageability. It can be used for on-the-fly analysis by beginners, and has 
a platform-independent metaphor. However, hyperlinked navigation sometimes 
is confusing, and the second mouse button is not implemented. Speed, which 
during tests allowed users to import a set of 10,000 records in a split 
second, is excellent. Comparable tools required more than one second to 
do the same task; Data Desk's analysis and plotting performance were just 
as impressive. During tests, Data Desk showed each variable as a different 
icon on the desktop, and users could view raw data by opening one or more 
variables 1 icons to show scrolling lists in automatically synchronized 
order. Users of spreadsheets and other 2D layouts may have to adapt to Data 
Desk's more versatile look, but the work is worth the effort. For instance, 
instead of opening dialog boxes to choose dependent and independent 
variables for a regression analysis, testers could choose variables from 
the desktop. Pop-up menus are used ubiquitously in Data Desk, including 
entries in output tables , which provide access to pick lists for 
other analysis choices. 

PRICE: $650 

COMPANY NAME: Data Description Inc (533092) 
SPECIAL FEATURE: Screen Layouts 

DESCRIPTORS: Business Graphics; IBM PC & Compatibles; Statistics; Windows; 

Windows NT/2000 
REVISION DATE: 20000830 
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Microsoft's Microsoft Internet News Server 1.0 beta, InterNetNews (INN), 
NetManage' s NetManage Forum Server 6.0 beta, and Netscape Communications 1 
Netscape News Server 2.01 are news servers reviewed and compared . This 
class of product supports USENET, which connects millions of users daily. 
USENET allows users to ask questions, share answers and views, and learn 
from each other (hopefully) . USENET requires special hardware and software. 
The products were tested for features supporting Internet news and private 
discussions over intranets. Microsoft News Server 1.0 beta and NetManage 
Z-Forum Server 6.0 beta are rated good overall, while INN 1.5 and Netscape 
News Server 2.01 receive only average or slightly above marks; INN is 
available free for download on the Internet. News Server provides an 
admirably mature Network News Transfer Protocol (NNTP) server that almost 
auto-administrates. It is also a good choice for private discussion groups 
because integration with Windows NT security makes user authentication 
relatively problem-free. Only news Server is known to authenticate through 
NT security. INN alone lacks support for UUCP feeding and multithreaded 
platforms. All the products provide reader support for XOVER, AUTHINFO, 
address-level access control, group level access control lists , and 
real-time and batch feeds . NetManage and News Server both provide a 
graphical, non-HTML administration utility, performance tools, and 
integration into the NT performance monitor. 

COMPANY NAME: Microsoft Corp (112127); NetManage Inc (525375); Netscape 
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SPECIAL FEATURE: Buyers Guides Screen Layouts • 
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RECORD TYPE: Review 
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The competitive firewall market is fueled by the level and quality of 
packet filter and proxy implementation. Router-based packet filters are 
less expensive but require significant expertise to implement. Application 
gateways (proxies) are easier to deploy and are more secure. Packet filters 

determine whether traffic should be allowed in or kept out of a 
protected network by first viewing the source and destination IP addresses 
and packet filters' sources and destinations. The information is compared 
to a table of access rules constructed by the network administrator. 
Each packet's TCP/IP header has to be examined. However, even small errors 
in typing can destroy security. Packet-filtering firewalls get around the 
inadequacies of packet filters by providing a text-based or graphical user 
interface (GUI) program for entering and validating filtering rules. 
Proxies are less sensitive than packet filters, using specially written 
programs to process inbound/outbound requests for network connections, and 
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they provide an extra layer of security because the program can throw away 
commands that a hacker can use to break in. They also allow finer control 
of application security. 
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DESCRIPTORS: Computer Security; Firewalls; Internet Security; 
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RECORD TYPE: Review 

REVIEW TYPE: Product Comparison 

GRADE: Product Comparison, No Rating 

Three popular PC-based visual xBASE products are compared , Visual Objects 
(CA-VO), Visual dBASE (V/dBASE) , and Visual FoxPro {VFP). Computer 
Associates International's VO provides an integrated development 
environment window that allows users to choose system components, such as 
browsers, visual editors, a compiler, and a debugger. Application 
development is hastened by the ability to run the application inside the 
IDE. V/dBASE requires the dBASE compiler or the client/server (C/S) version 
to distribute the application as a royalty-free, standalone executable. A 
security system guards against unauthorized access to DBF tables and 
related files. A class library supports creation of C/S applications using 
the World Wide Web as an application server. VFP is an excellent C/S 
development choice for users of the SQL Server RDBMS, and its data 
dictionary constructed around the DBF file format is revolutionary and very 
useful . 
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RECORD TYPE: Review 

REVIEW TYPE: Product Analysis 

GRADE: Product Analysis, No Rating 

Advertising effectiveness must be measured in order to determine payback 
The PC can be used to easily compile results and statistics. Relational 
database programs such as Microsoft Access and Lotus Approach can be very 
useful for this purpose, and both offer strong statistical capabilities. 
Approach sets up fields as worksheet column headings. Access tables ar 
similar to Approach's worksheets, and Access also offers more assistance 
with Wizards to help users accomplish specific tasks. A spreadsheet and 
relational database are often all a small business needs to analyze these 
types of statistics. Other tools, such as Cognos 1 Impromptu and PowerPlay, 
can let users examine data from multiple perspectives. One organization 
uses Impromptu to assemble customer data from a corporate database. The 
data is then sent to PowerPlay, a graphical reporting program, which 
allows , them to view sales and marketing data from different perspectives 
and drill down for more detail. 
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